Agreement Extends Access to Sonar’s Solutions Through Carahsoft’s Trusted Channel Ecosystem, Enabling Governed, Enterprise-Scale AI Adoption
Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, today announced that it has expanded its partnership with Sonar, a global leader in AI code verification and governance, to make Sonar’s validation platform, SonarQube, available beyond the U.S. Public Sector to all North American markets. Through Carahsoft’s partner ecosystem, resellers and services partners, organizations will gain access to the independent, enterprise-scale AI adoption solution trusted by 7m+ developers. Through this expanded agreement, Carahsoft will give Sonar broader reach with organizations that prefer a channel-based purchasing model, enabling streamlined procurement and more deployment processes.
The need for solutions like SonarQube heightens as enterprises embed agentic workflows throughout their organizations. According to Sonar’s 2026 State of Code Developer Survey, 72% of developers who have tried AI coding tools use them every day, underscoring the need to balance speed with safety and avoid introducing new security, complexity and reliability risks. Together, Carahsoft and Sonar are bringing zero-trust, multilayered verification to more teams across North America.
Also Read: CIO Influence Interview with John Elliott, Cybersecurity Author Fellow at Pluralsight
“Enterprises require verifiable, governed adoption of agentic development. Through our expanded partnership with Carahsoft, we will enable more organizations to do just that,” said Bill Sullivan, Vice President, North America Channel Sales, at Sonar. “By making our solutions available through Carahsoft’s partners, we’re empowering teams to contain risk, deploy confidently and ship higher-quality, more secure code in their agentic workflows.”
The expanded Carahsoft agreement helps organizations across North America apply Sonar to practical AI-development use cases: independently verifying code generated by AI agents before merge; identifying security vulnerabilities, reliability issues and maintainability concerns before they reach production; and establishing consistent code quality and governance standards across teams adopting AI-assisted development. Organizations can also use Sonar’s AI-native code review capabilities, expanded through its recent acquisition of Gitar, to review and validate agentic-written code with greater confidence.
“We are pleased to expand our partnership with Sonar to bring its zero-trust, multilayered verification solutions to commercial markets across North America, helping reduce outages, improve security and lower costs and risks associated with AI and agentic coding,” said Natalie Gregory, Vice President managing DevSecOps Solutions at Carahsoft. “Together, with our network of reseller and services partners, we are uniquely positioned to deliver Sonar’s solutions through the channels our customers trust most, enabling IT teams to more efficiently adopt tools that improve code quality, strengthen security and accelerate innovation.”
Catch more CIO Insights: How Are CIOs Aligning Technology with Workforce Agility?
[To share your insights with us, please write to psen@itechseries.com ]
